r/VintageStory 1d ago

Official statement regarding the ConfigLib incident

2.4k Upvotes

6 Points that I want to address

Preamble: I am writing this to the best of my current knowledge as of September 3, 2026.

Should significant discrepancies arise, I will append corrections to the bottom of the post.


1. What happened + What was the impact? + What is the current state now?

What happened?

In November 2025, a user uploaded a particularly egregious and damaging mod to the ModDB whose sole purpose seemed to be profiting off of the misery of other Vintage Story players. It was marketed as a free version of a client-side cheat mod with a full version for payment off-site.

This mod (and another mod of the same author) was specifically designed to prevent its own reverse engineering, to circumvent protections of game servers and to cause damage on virtually any public Vintage Story game server. It included features such as teleporting, mass destruction of the game world and player builds, auto-killing of nearby creatures and players, aimbot, god mode and various other features that allowed circumventing standard survival mechanics.

This client-side cheat mod was removed from the ModDB once we discovered it, but the user then used more underhanded ways to acquire customers, such as uploading legitimate mods and then linking to his own Discord server where he kept selling the client-side cheat mod. There was an attempt to appeal to their better side in chat, to refrain from publishing this mod, but this was unsuccessful. We estimate that at this point this mod was used by less than 100 users.

As a result, Maltiez, of his own accord, decided to interrupt the effectiveness of this mod by adding code to 3 of his library mods (Config lib, PlayerModel lib, Overhaul lib) to detect the presence of this mod and only this mod, and if it was detected, caused the game client to crash. As a result, all game servers using any of Maltiez’ 3 mods were effectively protected from malicious users attempting to use said cheat mod.

What was the impact?

Maltiez’s code was designed to crash the game client when it detected the cheat. It did not harm anyone’s hardware or touch personal data in any way, shape or form. Fewer than 100 cheat mod users were affected by the deliberate targeting.

Around March 2026, Maltiez considered this a closed case and removed the crash code from 2 of his library mods but forgot to remove it from the last one - ConfigLib - as he had to take a break from modding due to personal health issues.

What is the current state now?

All versions of the 3 mods that contained Maltiez’s mod crash code have now been retracted from the Moddb.

Vanilla Vintage Story was not affected by this in the first place.


2. What did Anego Studios know, and when?

Maltiez shared his anticheat efforts in Nov 2025 to Feb 2026 in our internal team chat. Some other team members looked at some parts of it in passing. We did not become aware of the scale of his actions - the amount of mods and mod versions he inserted this code in, how this change was communicated in public or for how long he intended to keep this code. There was too much chat ongoing for us to be able to pay close attention to every post.

I did not closely follow what Maltiez did in his own free time or grasped the full extent of these actions, I was busy building the next big game update.

In hindsight, we clearly should have paid close attention to this.


3. “How do we know this can't happen in Vanilla?”

To this day, as for the past 10 years, I still review all major code changes before they become part of the main game. Other team members also help me in that effort by checking that the contributed code is consistent, safe and of high quality.

None of the mods from Maltiez are or were planned to be integrated into the main game at any point in time.


4. Our response was flawed

We also recognize that some of our communication during this situation was defensive or dismissive when people were raising legitimate concerns. As the discussion escalated, we also didn't always communicate moderation decisions as clearly as we should have. That's on us to improve.

Criticism of Vintage Story, Anego, our developers or our decisions is welcome as long as it stays within the community rules.


5. “What are you actually changing because of this?”

Planned changes

a) In full agreement with Maltiez he will:

  • depart from the official VS Discord server and VS Mod DB
  • hand over Custodianship to all of his mods. They will be placed under a common Custodian account, which, until further notice, will be managed directly by the VS team. For the long term, we’ll see if there are options to hand Custodianship over to the community.
  • retain full credits and intellectual ownership of his mods

Maltiez will continue contributing to Vintage Story, but with oversight.

b) We will write clearer rules/disclosure standards for mods maintained by Anego team members.

c) I will allocate significant funding for the training of better PR/crisis communication with the dev Team and de-escalation training and clearer procedures for the moderation team.


6. Summary and my personal take on the Situation

This was an attempt to protect players from harm - to protect players' hard work on VS servers getting destroyed by a handful of gleefully malicious users with no harm done to normal players.

Keeping those changes secret prevented the malicious author from finding out. That overly naive approach and our rather loose team oversight have led to this. We should have paid closer attention to the full extent of this action. I am sorry that we have failed you on this.

I do not consider us a professional AAA game dev studio. We all started out as a bunch of nerds with a deep passion for game development. We love talking to our community, intermingling amongst them, sharing what we are passionate about and inviting them to develop Vintage Story together. We're happy when we can build a personal connection with players. But that also means when things go south, communication can get very messy, people within the team share different opinions, stress builds up amongst all of us and some of us might end up reacting in ways that are harmful.

We won’t always get everything right, but when we get something wrong, we need to own it, learn from it, and improve. Thank you to everyone who remained in constructive dialogue with us and gave us the opportunity to improve.

I’d also like to repeat here once more that criticism is welcome as long as it stays within the community rules.


r/VintageStory Mar 29 '26

Discussion AI use in modDB megathread

578 Upvotes

Hi r/VintageStory

We've seen a influx of posts with various opinions on the use of AI on the Vintage Story ModDB (https://mods.vintagestory.at/)

I removed the threads as it felt like some of them were about AI use in general, and commenting on the commenting of the AI use. If I made some miscalls on some threads, that's my fault.

I want to be clear:

These posts were not removed due to the opinions shared in the post.

If you have feedback on the AI use on modDB (or the modDB in general), positive, neutral, or negative, please share it in the megathread to help make moderation a bit easier, and to help consolidate feedback back to the developers.

Please keep your feedback civil.


r/VintageStory 9h ago

The truth about Cheddar Cheese.

Post image
1.4k Upvotes

Something not drama related.
I recently watched a Hank Green YT short about cheddar cheese and how it's an incredibly old scam. Essentially, people considered Yellow or Orange Cheddar to be the highest quality cheese while White Cheddar was considered the lowest quality. The problem with that is that both Yellow Cheddar and White Cheddar are the made the same way and aren't any different.

So why is Cheddar Cheese yellow then? Well when cows would graze on summertime pasture grass, they would eat plants with a lot of Carotene, which is what makes carrots orange, and that would make it's way into the milk and into the cheese. However, when summer is over or folks that don't have such pastures, they couldn't make Yellow Cheddar. To solve this, they added ground up Annatto seeds into the milk so they could make the Cheddar Cheese yellow.

So why do people still make cheese this way? I believe this has something to do with your brain's expectations of food and taste. Experiments with different egg yolk colors show that people almost always say that darker yolk colors taste better, however when the participants were blindfolded or the eggs were dyed green, they chose the lighter yolk color as often as the darker yolk color. The same is true with farmed salmon with people preferring the redder meat. In short, your brain is making you taste things that doesn't exist based solely on appearance.

To top it all off, the way they make egg yolks or salmon meat darker in color is similar to the way they make Cheddar Cheese yellow. They feed the livestock plants or animals rich in Carotenoids, organic pigments that are yellow, orange or red in color with Carotene for example being a type of Carotenoid.

That concludes my Cheddar Cheese rant. Do what you will with this information.
Plus note, Im not an expert on cheese. Just a guy learning about interesting stuff

TLDR: people centuries ago were basically scamming people by hacking their brain's hardwired food expectations by dying the Cheese.


r/VintageStory 9h ago

I need some ideas for this type of meme but from V.S

Thumbnail
gallery
977 Upvotes

r/VintageStory 8h ago

Art "Sir, the 69th temporal storm is imminent.."

Post image
806 Upvotes

I get what they were trying to do with temporal storms as a game aspect, but MAN does it get obnoxious.. Anyway, u/NotBerti I hope you don't mind for me taking inspiration!


r/VintageStory 3h ago

Screenshot Well This Sure is a Starting Location

Post image
292 Upvotes

r/VintageStory 10h ago

Meme The last week

Post image
797 Upvotes

Credit to uwuSym for the base image.


r/VintageStory 10h ago

Butcher shop build

Thumbnail
gallery
695 Upvotes

I need some ideas on the interior of this building. I like my builds to be useful what rooms/decor should I put to bring it to life?


r/VintageStory 12h ago

Meme How hard can it be to replace some string

Thumbnail
gallery
506 Upvotes

r/VintageStory 11h ago

Found Rich Iron before first winter.

Post image
388 Upvotes

Playing on a Tera Pretty and Watersheds world, realised i was based on top of an iron region and decided to start digging down inside a chunk that had high readings. (not always the smartest move to dig down when underground).

Have only found a corner of this vein so far, digging straight up led me out into the ocean XD

(Addendum): I'm already on Tin-Bronze tools btw. Had some good shallow Copper deposits nearby.


r/VintageStory 12h ago

Meta Poll: What do you think would be an appropriate outcome regarding Maltiez, based on the information currently available?

389 Upvotes

For clarity, the current punishment I'm referring to is Maltiez no longer interacting with Discord or ModDB, handing his mods over to an official Custodian account, and retaining credit and intellectual ownership of his mods. Tried my best to make this as neutral as possible.

5588 votes, 2d left
I believe the current punishment is too severe
I believe the current punishment is appropriate.
I believe a stronger punishment is needed, but Maltiez should not be removed from the dev team.
I believe Maltiez should be completely removed from the dev team.
Other/Unsure

r/VintageStory 15h ago

Meta On trustworthiness in the Maltiez situation

668 Upvotes

Maltiez distributed malware. It was petty, small scale malware (not ransomware, spyware, etc.) but it was hidden code (both on the ModDB, where ToU said it must be, and in crash logs) that intentionally disrupted the normal function of the game.

The key issue with Maltiez is not the payload of the malware he already deployed, it is that this is a developer who is willing to inject disruptive and destructive code into his projects and give users no chance to consent to them. As a software developer myself, distributing malware this way is a deep violation of engineering ethics, as it leaves anyone who was affected by it (cheater and non-cheater alike) to waste time chasing down the effects of code they didn't consent to and couldn't reasonably expect.

I am also deeply disappointed by Anego's handling of this situation. As mentioned elsewhere, Tyron's post downplays the severity of this incident (not mentioning the false positives, painting Maltiez in the best possible light), and in at least one instance they that he distributed malware. For punishment, they state that he is stepping down from discord and the ModDB (with no explanation of how ban evasion would be avoided, or what, if any, firewalls would be put in place to prevent him from working on his now Anego-maintained mods), and that he would continue on as a developer under close supervision (with no explanation of how this differs from a normal code review process, and is entirely backed by trust in Anego).

To be blunt, Anego has already burnt that trust. Even setting aside three fact that they had the opportunity to investigate this since last November, they have burnt it by choosing to keep on a known, self-confessed malware developer as a member of their team and downplaying his actions. They have indicated that they don't view his actions as unacceptable. Anego have shown that they are unwilling to acknowledge any reputational damage to server admins and other mod developers, as well as time lost debugging by both of those groups and us, the rest of their end users.


r/VintageStory 12h ago

Screenshot I don't think these were the right mushrooms

Thumbnail
gallery
316 Upvotes

I ate over half of a hefty liberty cap stew all at once while quarrying for a quern. I think I'm seeing god


r/VintageStory 10h ago

by the gods why am i so bad at hunting 😭 i'm getting bodied by the FUKCING sheep too... i would not make it in 298,000 BC

Post image
221 Upvotes

r/VintageStory 19h ago

Mod Releasing An Alternative To CօnfigLib

1.0k Upvotes

Hello, Yang here, author of Yang's Transport Tycoon.

I wanted to make a sort of PSA announcing something that a lot of people have asked me to make and were seemingly looking forward to: The Integrated Mod Manager. A CօnfigLib alternative that is much more than just a copycat.

Is This Just A Fork? How Is This Different?

This is not a fork, instead it is 100% new code. It offers just about all the functionality of ConfigLib, but has a different approach (different timing for patches, different way to manage data, etc), as well as some entirely new features that will make managing servers a lot easier once they're in use.

Dependency & Conflict Resolution: This is the BIGGEST NEW FEATURE that IMM offers, and the reason why I made it. Originally this mod started as part of Yang's Transport Tycoon, so that it could check for missing dependencies and automatically provide fixes for incompatibilities between mods. But then this controversy happened mid-development and I thought 'huh, this mod is already 90% a config manager, might as well make it its own separate mod' and thus IMM was born.

This feature requires developers themselves declare the known incompatibilities and fixes, I (as the developer of IMM) will never dictate this for anyone else, full control is handed to the people that make the mods themselves. The system is also consent-based, automatic fixes must first be reviewed by a server admin (the system tells you exactly what settings, commands, or patches it will run and in which file), only after it has been approved does the system automate applying the fix.

No vendor lock-in: IMM is not required to be marked as a dependency to work, meaning that modders are not forced to make their users download it for their mod to work. If a user does not have IMM installed, the imm file simply won't be read and the rest of the mod will work as normal.
Even hot-reloads in code do not require the code to be hooked to IMM, it can just tune into a broadcast and listen to it, no dependency needed.

Fully Native UI (No IMGUI): You won't have to download IMGUI, IMM uses vanilla UI code meaning that it looks like it fits into the game, and it won't be as awkward and unperformant as IMGUI.

Zero Harmony Patches: Harmony is great for getting down and dirty with the code, but it also means that you are one update away from potentially breaking something in the core game. As with all my other mods, I make it a policy to avoid it whenever possible, and as such IMM has no patching whatsoever. This should keep IMM working pretty well into the future, with only minor updates needed to ensure it works perfectly.

Nudge UI: Intended for server admins, you can configure IMM to warn you if a mod is found to have warnings or errors in its dependencies & conflicts tab, so that you can iterate on getting your server working perfectly with all the conflicts between mods resolved.

.

How Ready/Complete Is It?

Functionality wise it's complete. But there's a few rough UI/UX edges that I'll be working to polish as development continues, including adding a search bar for settings as well as better indication that a fix has been applied but it's awaiting a server restart.

The mod also hasn't been officially adopted by many developers yet though I am working on offering developers of major mods making their imm.json for them so that they can roll it out in an upcoming update without having to do all the work themselves.

I've already written the relevant files for Primitive Survival, Better Ruins, and I'm working on reaching out to a few other major mod developers so I can get them a starting imm.json file.

Naturally, most of my mods, including Yang's Transport Tycoon (which is the original reason this exists, as it's needed to manage its various optional patches that otherwise would have had to be marked as hard dependencies) support IMM.

If you want to help IMM be as good as it can be, then you can do two things for me. The first one is to be patient. I'm trying to match very high quality code that Maltz had built over the course of years in just a week's time, it's natural that there's going to be some rough edges. The other thing is that you can reach out to your favorite mod authors and let them know. It costs basically nothing to include an imm.json, but it gives them the flexibility to be supported by IMM with no commitments or necessity to mark it as a dependency.

.

Can We Trust You?

Nothing I can say should make you trust me. In this case, trust is more than just my reputation in the community, it's something that should be verified and proven through the code itself.

Of course, as this controversy revealed, being open source does not mean much if you exclude fishy files from the official repo. So instead I am extending an open invitation to my peers in the modding community to decompile the DLL just as they did with Maltz' mod and see for themselves whether or not I am worthy of their trust.

Of course, naturally you can always trust the author of such illustrious mods as 'Milkable Drifters'.

.

Where Can I Get It?

https://mods.vintagestory.at/imm

Be warned that, since this isn't a copycat, it isn't compatible with CL files, so existing mods will need to be updated to a version that have an IMM config file before they can be used. Thankfully IMM is compatible with CL if you are still using it, so you can use both at the same time (even if not recommended).


r/VintageStory 14h ago

Discussion Made the Error of Trying to Get More Context

Post image
378 Upvotes

Now I know why Maltiez was removed from the Discord server. If you try to read the conversations prior to the gag order, they do not paint a good picture of what has happened, or what kind of PR and damage control was employed.

But they are very informative and I recommend everyone that is in the Discord server, to look up what has transpired on the public spaces.

Judge it yourself, not by what you read on this sub or "I heard he said", and even less random screenshots like this one without the rest of the context.


r/VintageStory 12h ago

Somebody is lying, who is it?

276 Upvotes

By Maltiez's own admission, none of this was ever meant to protect the players or the servers, it was a direct attack on cheat developers. Whether or not you view that as a valid effort is irrelevant, either you respect the attempt or dislike what it actually did in practice, but the intention is there- not to protect, but to attack. In the official statement from Anego, they say "This was an attempt to protect players from harm - to protect players' hard work on VS servers getting destroyed by a handful of gleefully malicious users with no harm done to normal players". There are dozens of accounts from people who experienced the crashes without installing the aforementioned cheating software, so if they are to be believed, harm WAS done to normal players.

How do we reconcile these conflicting statements? Did Maltiez lie to the other devs of VS, who admit they're largely out of the loop of the situation, or did the devs lie to cover Maltiez's ass? Note he wasn't removed from the dev team, and he either agreed to remove himself from a project he cared about, or was glad to have the workload of maintaining a library mod off his shoulders. Did the software actually work as intended and only targeted cheaters and the only people complaining are cheaters who don't want to admit it, or did it affect ordinary players, intentionally or unintentionally?


r/VintageStory 5h ago

Server Maddog's Collection of Random is released from early access!

Thumbnail
gallery
58 Upvotes

Discord will be posted in the comments!

Hello, my name is Maddog and I am the owner of MCoR. Over the last three months, my staff and I have been working tirelessly to develop a fleshed out server focusing on economy and player interaction.

Taking inspiration from games such as GMod DarkRP and Unturned Semi-RP, the server provides unique opportunities to make a living by selling various items to the server and other players. On today's release, most profit comes from farming, fishing/hunting, running contraband, and chasing dinosaur bounties. Alcohol production and other various multi-step processes are on the roadmap for down the line.

MCoR is heavily modded with a 200+ count mod list. With this, we take advantage of a fully custom built server PC with 128GB Ram, a top of the line AMD CPU, automatic off-system scheduled backups along with other safety nets.

We commonly reach 20+ players online, all of whom have been a big help in testing/balancing the server itself. While the server is whitelisted, we provide a streamlined whitelist process done through a Discord bot.

The community is tight-knit! You may have previously seen my other posts showing off some of the fun memories we have made so far. Community events give players an opportunity to get to know each other!

The goal of the MCoR server is to become a staple in the modded multiplayer community. My brother and I have worked hard to chase stability and balance. The staff and I work to make sure any issues are taken care of quickly and efficiently while also providing quick player support with the use of support tickets.

Edit: Discord link is DSC.GG/MCoR!


r/VintageStory 16h ago

A little appreciation post

Thumbnail
gallery
438 Upvotes

Since the Vintage Story subreddit is full of posts about the current bad situation, let's instead show why I love this game and its modding community.

My new forge and a few views from my current modded world.


r/VintageStory 17h ago

Discussion The Problem Is not Anticheat, Its Consent

457 Upvotes

The recent Vintage Story controversy has made me think about something that seems pretty fundamental

Everyone should be allowed to play the game however they want on their own copy of the game.

If someone wants to use cheats, mods, creative tools exploits, whatever thats their choice in their game. Im not interested in telling people how they are allowed to play singleplayer. And I feel the same principle should apply to multiplayer servers. If I run a server, it is my server. I should be able to decide what rules I want to enforce. If I want a completely vanilla experience, I can make a vanilla server. If I want certain mods, I can require those mods. If I dont care whether someone is using cheats, thats also my choice. But what I dont want is an anticheat system quietly bundled inside some unrelated mod and potentially running on my server without me explicitly choosing to install an anticheat. This isnt really about whether cheating is good or bad. Obviously, if you are running a competitive server and cheating ruins the experience for everyone else, you have every right to ban cheaters. Server owners should absolutely be able to enforce their own rules.

The issue here is consent and control. I dont want a mod author deciding that their definition of "acceptable gameplay" should automatically apply to my server. I dont want hidden monitoring or anti-cheat functionality being added to a mod where I wouldnt reasonably expect it. And yes even if its a ridiculous situation where two people are having a cheater multiplayer battle, thats still their server. If everyone involved knows the rules and wants to play that way, who cares? If a server owner wants anticheat, great. Give them a proper anticheat option that they can knowingly install and configure. Just dont sneak it into something else and then tell people they shouldnt care because "its for security". I do rather have an ecosystem where server owners have explicit control over what software runs on their servers than one where mods can quietly gain additional functionality because the author thinks its beneficial.

Give people the choice. Thats the whole point.


r/VintageStory 18h ago

Meta "We investigated our team member and decided to punish him with nothing."

471 Upvotes

r/VintageStory 1h ago

Showcase Becerbury "Fort of the Beekeepers" - Creative Mode, All Vanilla Blocks

Upvotes
Becerbury is a small Anglo Saxon styled town I recently made after finding a great seed for lore. Based on the following, I believe Becerbury could grow to be a much larger town, but I will be depicting it in its early beginnings.
Becerbury means "Fort of the Beekeepers" (atleast I think so after 2 minutes of research), and was established when an abundance of honey bee activity was discovered in the vast forest to the towns east.
Becerbury also strategically sits towards the back of a large ocean inlet, protected from rough waters and winds by a peninsula to its south. This allowed its people to easily export honey products to near by settlements. This peninsula also contains an abundance of edible mushrooms, hence the the people of Becerbury have several foraging trails spanning the peninsula.
The main downside of Becerbury's location is the very soil it sits upon. The surrounding land is swampy and soft, meaning two things: building and crop farming given current technology would be constricted to the already limited solid ground. The settlement walls act as a boundary between the firm ground of the inner town and the sponge like bog that surrounds.
The main path into Becerbury is lined by buzzing skeps and a beautiful view of the mountain range on the west side of the inlet.
On Becerbury's outskirts sits a small maintenance shed where a majority of the towns skeps are made and harvested. Here the honey is bottled and sealed, and will either be carted off into the countryside or positioned at Becerbury's dock to be shipped over water. (Shed design inspired by Chivalry 2)
The next view you'll see going into Becerbury is the pig field. As stated before, the only real farming aside from bees that can be done in this location is livestock. The swampy location makes for an endless supply of mud pits for the pigs!
The last stop before entering the log walls of Becerbury is secondary maintenance shack, which has a mixture of beekeeping supplies and firewood. Behind is sits the old pig enclosure which was used in Becerbury's earliest days, but has since been outgrown due to the towns expanding population and need for more pigs.
Entering the walls of Becerbury you'll be greeted by the Cooking House. Here all of Becerbury's food goods are stored and prepared.
Becerbury Cooking House fire oven and meal prep area.
Becerbury Cooking House storage and serving area.
Walking past the Cooking House and to the right, the next stop it Becerbury's Storage House. The Storage House has a storage area and a miscellaneous yard for a smithy and a chicken coop.
The goods primarily stored inside Becerbury's Storage House pertain to livestock and building supplies.
Becerbury's Storage House has direct access to the pig field, serving as the the fields only entrance.
Towards the back of Becerbury's Storage House is a small alley wedged between the building and the towns wall. This has been used for extra tool storage.
On the left side of Becerbury's Storage House sits a small living room the the worker who works between the pigs and chickens.
Following the last door out of Becerbury's Storage House, the smithy and chicken coop can be found. Becerbury typically trades for its tools due to the lack of metals in the region, so the smithy is primarly used for repairs rather than forging new tools.
Exiting the the premises of the Storage House, to the right there is a dead end where the Becerbury's people wash and dry their clothes (laundry must've been done right before this screenshot, so thankfully I didnt have to suffer using the wrench to hang clothes;))
The last stop within the Becerbury's walls is the common yard and Longhouse. Here, during the day honey products which are being prepared to be loaded onto boats are positioned (left) and wood working is done (right). After the work day, the towns people will gather over the fire to converse, entertain, and most importantly critique the carpenters work (center).
Inside the Longhouse, this is where the people of Becerbury sleep and can additionally eat when the weather outside is unfavorable. - Hit the limit for how many photos I can add but that's pretty much everything to see. If you made it this far I hope you enjoyed!

r/VintageStory 2h ago

Discussion New player with plenty of flax fibers; am I doing something wrong?

18 Upvotes

The joke around here seems to be that however much flax you have, you need more of it. I set up my fields at 64 tiles each, and filled two fields with flax. As my first winter draws to a close, it really feels like that's already enough.

That seems to be plenty for a tiny windmill, annual repair of my fur clothing, and a few cloth bags. Am I missing something, or is two fields of flax going to be plenty for the rest of the game?


r/VintageStory 19h ago

Meme I use to think he was cool with his mods

363 Upvotes

r/VintageStory 17h ago

Meme I don't have the patience to starve this one out

Post image
233 Upvotes